/usr/share/setools/3.3/seaudit-report.conf is in setools-gui 3.3.8-3ubuntu1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 | <?xml version="1.0" ?>
<!-- comment
seaudit-report.conf
This conf file is used to configure information presented in
reports generated by the seaudit-report tool.
The XML-based configuration file is laid out as follows:
Report Configuration
Standard Section Definitions
Custom Section Definitions
SEAudit View Definitions
The STANDARD SECTION definitions define a set of predefined tags
that the tool will look for when creating the report. The tool
will consider each of these tags as a standard section for the
report. To exclude a standard section within the report, simply
remove the appropriate standard-section tag. The predefined
standard-section tags may use any of the following identifiers:
'Statistics': displays general statistics for the log.
'PolicyLoads': displays all load policy messages.
'EnforcementToggles': displays all enforcement toggle messages.
'PolicyBooleans': displays all policy boolean messages.
'AllowListing': displays all allow messages.
'DenyListing': displays all denied messages.
All of the above predefined tags require the attribute 'id' to
be specified or an error will be returned. The 'title' attribute
is optional.
The CUSTOM SECTION definitions are used to create customized
sections within the report through the use of saved seaudit
view files. SEAudit views files can be created using the seaudit
GUI tool or by manually creating the file(s) with the correct
format. View tags should be provided as children within the
custom-section tag and a valid pathname is required for the
tags' 'file' attribute. An example of a custom-section tag can
be:
<custom-section title="Critical Errors">
<view file="/home/sec_admin/seaudit-report/views/critical.vw">
</view>
</custom-section>
The 'title' attribute is optional for the custom-section tag.
NOTE: The tool will display the reports' sections in the order
in which the tags are defined within the config file. So for
instance, inserting the custom-section tag to be the first defined
tag within the config file, will display the custom-section results
before all other results in the report. See the default settings
below for further information.
-->
<seaudit-report title="SEAudit Log Report">
<standard-section id ="Statistics" title="Log Statistics"></standard-section>
<standard-section id ="PolicyLoads" title="Policy Loads"></standard-section>
<standard-section id ="EnforcementToggles" title="Enforcement mode toggles"></standard-section>
<standard-section id ="PolicyBooleans" title="Policy boolean changes"></standard-section>
<standard-section id ="AllowListing" title="Allow Listing"></standard-section>
<standard-section id ="DenyListing" title="Deny Listing"></standard-section>
</seaudit-report>
|